Identity & Access Management Engineer

About the role

AVEVA is seeking an Identity & Access Management (IAM) Engineer to join its global IT team. The role focuses on designing, automating, and operating scalable IAM services for workforce identities, primarily using SailPoint as the enterprise Identity Governance platform.

Key responsibilities

• Engineer and operate automated IAM solutions for workforce identities.
• Support and enhance SailPoint with a focus on automation, scalability, and governance.
• Design, implement, and optimise automated Joiner‑Mover‑Leaver (JML) processes.
• Automate IAM access request fulfilment via ServiceNow.
• Develop code‑driven workflows and integrations to eliminate manual IAM tasks.
• Support and maintain Active Directory and Entra ID (Azure AD) environments.
• Manage authentication, authorisation, roles, and entitlements.
• Automate access certifications, reviews, and compliance reporting.
• Respond to IAM‑related incidents with root‑cause fixes through automation.
• Produce and maintain documentation, diagrams, and operational runbooks.

Required profile

• Hands‑on experience in IAM engineering with a strong automation mindset.
• Proven ability to reduce manual IAM operations and build repeatable, code‑driven solutions.
• Strong analytical, problem‑solving and communication skills.

Required skills

• SailPoint (IdentityIQ, IdentityNow or similar).
• PowerShell scripting and API integration.
• ServiceNow workflow automation.
• Active Directory and Entra ID (Azure AD) administration.
• Knowledge of SSO and authentication protocols (SAML, OAuth2, OpenID Connect, Kerberos, LDAP).
• Experience with CI/CD and DevOps practices.

What we offer

• Salary range $92,100 – $192,500 per year.
• Full‑time permanent position.
• Opportunity to work with cutting‑edge IAM automation technologies in a hybrid cloud environment.